Firewalld

From Gentoo Wiki
Jump to: navigation, search

FirewallD is DBUS-enabled firewall software for Linux, which works on top of the in-kernel iptables firewall. It was created by RedHat, but it is available on many Linux distributions, including in Gentoo as net-firewall/firewalld.

From the project homepage:

Firewalld provides a dynamically managed firewall with support for network/firewall zones that define the trust level of network connections or interfaces. It has support for IPv4, IPv6 firewall settings, ethernet bridges and IP sets. There is a separation of runtime and permanent configuration options. It also provides an interface for services or applications to add firewall rules directly.

Its documentation is available on the project website in HTML format.

USE flags

USE flags for net-firewall/firewalld A firewall daemon with D-BUS interface providing a dynamic firewall

gui Enable support for a graphical user interface
iptables Add support for net-firewall/nftables as firewall backend
nftables Add support for net-firewall/nftables as firewall backend

Configuration

Configuration may be modified with firewall-cmd; changes will remain in effect until the service is restarted. To persist changes, either:

  • Run
    root #firewall-cmd --runtime-to-permanent
    after firewalld is in the desired state

or:

  • Include the --permanent flag with a given command. Running
    root #firewall-cmd --reload
    will be required for the changes with --permanent to take effect.

See Also

  • Iptables — a program used to configure and manage the kernel's netfilter modules.
  • nftables
  • ufw

References